Privacy Policy

Itopmed is committed to respecting the privacy rights of its website users. This Privacy Policy (the "Policy") explains how we collect, store, and use your personal data when you browse the Itopmed.com website (the "Website"), shop with us, or otherwise provide us with your personal data. These terms apply regardless of how you access the Website and cover any technology or devices we use to provide you with the Website.

This Policy describes the personal information we collect about you, why we collect it, how we use it, and when we share it with third parties. Our Policy also describes the choices you can make about how we collect and use certain information. If our information practices change, we will post the updated Policy on our Website. You can tell if the Policy has changed by checking the revision date displayed on this Policy. We will not retroactively apply changes in our Policy to information collected from you under the previous Policy if we determine, in the exercise of our reasonable discretion, that the changes materially affect your rights unless we have notified you of the policy change and provided you with an opportunity to opt out. If we have your current email address, we will provide you with this notice via email; otherwise, we will prominently post notice of the changes on our Website's homepage.

You must read this Privacy Policy carefully, and we recommend that you print and retain a copy for future reference. By browsing or otherwise using this website, you acknowledge that you have read this policy.

For the purposes of the General Data Protection Regulation (Regulation (EU) 2016/679, “GDPR”), Itopmed is the “data controller” (as defined in the GDPR) of personal data, which determines the purposes and means of processing that personal data.

In addition, under the GDPR:

• “Personal data” means any information relating to you that can directly or indirectly identify you;

• “Processing” means any operation or set of operations performed on personal data or on sets of personal data.

What categories of personal information do we collect about you and for what purposes?

We collect personal information in two ways: directly from you, typically through forms on our website; and when you interact with us.

When we collect personal data through forms, fields marked with an asterisk are required. Certain personal data we request from you is necessary for us to perform the contract between you and Itopmed, provide you with the services you requested, or comply with legal requirements. If you do not provide the personal data marked with an asterisk, this may affect the goods and services we can provide.

We collect and process personal data for the following purposes:

• Customer relationship management, for which we primarily collect identifying data such as your name and contact details;

• Order management, for which we collect information such as your name, email address, billing address, shipping address, phone number, product selections, and credit card or other payment information;

• Sending commercial communications, particularly by subscribing to our newsletter through your email address;

• Organizing competitions or promotions, for which we collect data such as your name, email address, or phone number;

• Itopmed will respond to inquiries about our products or brands and manage after-sales service when you contact us at notice@itopmed.com.

• To manage customer product reviews, we will collect at least your email address.

• To analyze the ergonomics of our website through certain cookies or other technologies, which enable us to collect information about your online browsing, such as your browser type, the country code of your device, the pages of our website you viewed during your visit, the ads you clicked on, and any search terms you entered on our website.

Our website may also use a web logging service, which may record mouse clicks, mouse movements, page scrolling, and any text entered into website forms. The data collected by this service is used to improve the usability of our website. The collected information is stored and used in aggregate and statistical reporting. All data related to website ergonomics is statistical data about user browsing actions and patterns, and does not identify any individual.

If you do not wish your website activity to be recorded, please contact the following email address: notice@itopmed.com

The legal basis for processing your personal data is as follows:

• Data processing related to customer relationship management and your order management is either based on the performance of the contract between you and Itopmed (for example, when you create an account with us or order products from us) or on our legitimate interests (transaction security helps us prevent fraud);

• Data processing related to sending commercial communications is based on your specific consent;

• The legal basis for processing data for organizing contests or promotions is the performance of the contract between you and Itopmed (to allow you to participate in such events);

• When you send us requests about our products or brands or manage customer reviews of our products, your data is processed based on your specific consent;

• We also use the information you submit to us to improve our products and promote reviews to other customers;

• Processing related to the ergonomics and statistical development of our website is based either on our legitimate interest in cookies used to improve the website, ensure its proper functioning, and ensure security, or on your specific consent for all other cookies (used to send targeted advertising or provide customized services, or to run statistical data). For more information, please see the "Cookies" section below.

We will treat all your personal information confidentially. Because customer information is important to us, and protecting your privacy is of paramount importance to us, we will not share your personal data with any third party except for the limited reasons outlined below.

We only disclose data to:

• Other companies within our group;

• Suppliers we engage to process data on our behalf;

• Government agencies and law enforcement bodies to comply with legal obligations or protect certain rights;

• Successors to our business (in the event of a transfer of assets or the sale of any or part of our business).

We share personal information with our parent company or other entities within our group that follow practices at least as protective as those described in this Privacy Policy.

We share personal data to a limited extent with trusted vendors who conduct business on our behalf. These vendors may assist us by providing our internet platform, providing marketing assistance, delivering products to you, providing customer service, or helping us prevent fraud. We only provide them with the personal information they need to provide their services and require them to commit to using your data only for the purposes specifically outlined. We will always do our best to ensure that these third parties keep your personal data secure and confidential.

We release account and other personal information when we believe release is necessary to comply with legal requirements, enforce or apply our policies, or protect the rights, property, or safety of the Site, our users, or others. This includes exchanging information with other companies and organizations for fraud protection and credit risk reduction. However, this does not include selling, renting, sharing, or otherwise disclosing personal information for commercial purposes in violation of the commitments set forth in this Policy.

The internet is used globally, and collecting and processing personal data on the internet involves international data transfers. The data we collect from you may be transferred, accessed, and stored, and will always be kept secure and in compliance with any applicable data protection regulations.

This data may also be processed by third parties operating on our behalf or for one of our suppliers. Such third parties may be engaged in tasks such as fulfilling your orders, processing your payment details, and providing support services. When we transfer personal data to third parties, we require them to provide adequate guarantees to implement appropriate technical and organizational measures to ensure that the processing complies with regulatory requirements and protects your rights as a data subject.

We will retain your personal data for as long as necessary to fulfill the purposes for which it was collected or to comply with our legal obligations. • We retain data associated with account creation until you ask us to delete it or until a period of user inactivity has expired as detailed in our document retention policy;

• Data associated with product orders (whether through a customer account or guest checkout) will be retained for the duration of the contractual relationship related to order management;

• When you participate in a competition or promotion, your data will be retained for the duration of the event;

• Data associated with your subscription to our newsletter will be retained until you ask us to unsubscribe or delete it or until a period of user inactivity has expired (as defined in our internal retention policy);

• When you send us a request regarding our products or brands, your data will be retained for the time necessary to process such request;

• We will retain personal data in cookies set on your device for as long as we need it to fulfil the purpose for which it was collected (for example, session identification cookies are only retained for the duration of the session).

We may retain some personal data for longer periods to comply with legal or regulatory obligations (for example, to fulfill invoicing obligations) or to protect our legitimate business interests (for example, to pursue claims before the courts).

We receive and store certain types of information whenever you interact with us.

When you visit our website, information about your browsing may be stored in "cookies" installed on your device.

We place these cookies to facilitate browsing our website.

Our providers may also place this information when you visit other websites in order to provide you with personalized advertising.

In addition, some cookies may be placed in different areas of our website to display advertising content from third-party advertisers on your device.

Please note that only the issuer of a cookie can read or modify the information it contains.

The cookies we place on your device enable us to recognize your browser when you connect to our website.

We place cookies for the following purposes:

• To compile traffic statistics (number of visits, page views, abandonment during the order process) in order to monitor and improve the quality of our services;

• To adapt the presentation of our website to your device's display preferences;

• To remember information entered into forms, to manage and protect access to specific and personal locations (such as your account), and to manage your shopping cart. We may send you emails to keep you informed about your order status; you can unsubscribe at any time by clicking the unsubscribe link in each email.

• Provide you with content, including advertising, relevant to your interests and tailor the offers we send you.

• Itopmed uses cookies to collect information about abandoned shopping carts. A shopping cart is considered abandoned if no action is taken or no items are purchased within 30 minutes. After this time, a text message reminder will be sent.

When you visit our website, one or more cookies provided by our providers ("third-party cookies") may be placed on your device through pages on our website or through content displayed in our advertising spaces.

The cookies placed on our website by the providers we use to promote our events and offers are designed to:

• Recognize products viewed or purchased on our website in order to personalize advertising offers sent to you when you visit other websites;

• Send you Itopmed offers via email, if you authorized this during registration.

Cookies included in the advertising spaces on our website are designed to generate advertising statistics (e.g., number of impressions, which ads were displayed, number of users who clicked on each ad, etc.).

Cookies placed and used by third parties are subject to their privacy policies. We do not have access to or control over third-party cookies. However, we ensure that our partner companies process information collected on our website only for our purposes and in compliance with all applicable regulations.

You can reject third-party cookies by adjusting your browser settings accordingly. Any of these settings may affect your browsing experience on the internet and your ability to access certain services that require the use of cookies.

You can configure your browser software to store cookies on your device or to reject cookies systematically or based on the issuer of the cookie. If your browser is set to reject all cookies, you will not be able to shop or use basic features of our website, such as retaining items in your shopping cart or receiving personalized recommendations.

You can also configure your browser to prompt you to accept or reject cookies before a cookie is added to your device.

To learn how to manage cookies on popular browsers, see the following:

- Google Chrome

- Microsoft Edge

- Mozilla Firefox

- Microsoft Internet Explorer

- Opera

To find information related to other browsers, please visit the browser developer's website.

To opt out of being tracked by Google Analytics across all websites, visit https://tools.google.com/dlpage/gaoptout

To learn more about cookies, including how to see which cookies have been set, visit http://www.aboutcookies.org or http://www.allaboutcookies.org

We may use analytics technologies to display or send personalized content or communications (defined by the GDPR as any form of automated processing of personal data that evaluates personal aspects relating to a natural person, in particular to analyze or predict aspects about the data subject's preferences or interests, behavior, or location).

After browsing our website, personalized banner ads may appear when you visit other websites. We are committed to providing you with offers that are relevant to you. Therefore, the ad banners displayed will be related to the products you viewed while browsing our website across your device. This service is designed to provide personalized advertising displaying products or services based on internet users' recent behavior on our partners' websites and apps. To do this, our providers use cookies to identify users.

Targeting Information:

When you consent to us contacting you for business purposes, we may send you emails and other communications about goods and services that may be of interest to you. We do this by studying our customers' online browsing and shopping habits and providing them with information about the products they've viewed and used. If you indicate your preferences when providing your details, we use this information to better select the information we send you.

We use online browsing data to track your use of our website to understand which products and services interest you and collect certain personal information, such as your name, email address, phone number, and a unique identifier associated with your device. This information is then used to facilitate your purchase process, including contacting you (via email or text message) or personalizing online advertising displayed to you.

Transaction Security and Website Abuse:

To provide you with the best possible service and ensure a secure experience for payment and order fulfillment, we use some of your data to prevent and address any misuse of our website. We have engaged our service provider, Adyen, to perform automated testing on this data.

The data involved includes data related to contract execution (purchased items, personal information, payment method, and bank details).

Based on the results of these tests, we may decide to implement any relevant security measures or, if transaction security cannot be guaranteed, cancel an order. In the event of an incident such as payment fraud or shipping fraud, order-related data will be stored in a specific file to allow us to perform any additional verification related to future orders. We will notify you of any testing so you can provide your feedback.

If you withdraw your consent to the processing of your personal data for transaction security purposes, you may no longer be able to use the website or place orders.

You have the following rights at any time:

• The right to request access to the personal data we hold about you;

• The right to request that we correct any inaccurate or incomplete personal data;

• The right to request the erasure of personal data (the "right to be forgotten") if the data is no longer necessary for the purposes for which it was collected or otherwise processed, or if you withdraw your consent (although we may need to retain some personal data to meet legal requirements or legitimate interests). • You have the right to obtain restriction of processing where one of the following applies:

• If you contest the accuracy of your personal data, restriction of processing will be implemented for a period allowing us to verify its accuracy;

• Where processing is unlawful and you oppose the erasure of your personal data and request the restriction of its use;

• Where we no longer need the personal data for the purposes of the processing, but you require it to establish, exercise, or defend your legal rights;

• Where you object to processing based on legitimate interests, restriction of processing will be implemented for a period allowing us to verify whether our legitimate grounds override yours.

• You have the right to object to processing of your personal data based on our legitimate interests, for reasons relating to your particular situation. You also have the right to object at any time to processing for direct marketing purposes (including profiling to the extent it is related to such direct marketing);

• The right to data portability, which means you have the right to receive the personal data we hold about you in a structured, commonly used, and machine-readable format and to transmit those data to another controller, provided that the processing is based on your consent or a contract and is carried out by automated means. You also have the right to request that we transfer your personal data directly to another controller, where technically feasible.

• You have the right to opt out of any marketing communications we may send you by clicking the unsubscribe link at the bottom of any email we send you.

• The right not to be subject to a decision based solely on automated processing (including profiling) that produces legal effects concerning you or similarly significantly affects you (unless the decision is necessary for entering into or the performance of a contract between you and Itopmed or is based on your explicit consent).

• You have the right to lodge a complaint with a supervisory authority if you have reason to believe that Itopmed has violated your rights with respect to your personal data.

You can exercise these rights by contacting Customer Service via email.

• Email: notice@itopmed.com

Please note that we may ask you for additional information necessary to confirm your identity in order for you to exercise your rights.

We are committed to providing a safe and secure environment for our customers. While we implement appropriate technical and organizational measures to protect the personal data you provide to us, no transmission over the internet can be guaranteed to be secure. Therefore, please note that we cannot guarantee the security of any personal data you transmit to us over the internet.

If you are using a computer or terminal in a public place, for your own safety, we recommend that you always log out and close your web browser after completing your online session. Additionally, we recommend that you take the following security measures to enhance your online safety:

• Keep your account password confidential. Remember, anyone who knows your password can access your account.

• When creating a password, use at least eight characters. A combination of letters and numbers is preferred. Avoid using dictionary words, your name, email address, or other easily accessible personal data. We also recommend that you change your password frequently. You can do this by going to "My Account" and clicking "Change Name, Email, or Password."

• Avoid using the same password for multiple online accounts.

Certain links within this website may lead to other unrelated third-party companies. We will never share your personal information with these third-party companies.

Links to third-party websites on our website are provided for your convenience only. We do not control these websites or their privacy practices, which may differ from ours. We do not endorse any third-party websites accessible through this website. We recommend that you review the privacy policies of any company before submitting your personal information.

The data you choose to provide to unrelated third parties is subject to their privacy policies. Certain third-party companies may choose to share their personal data with us; such sharing is subject to the privacy policies of those third parties.

We are not responsible for the personal data collected, stored, and used by third parties through their websites. You should always carefully read the privacy policy of each website you visit.

We do not, and will not knowingly, collect information from anyone under the age of 16 who is unsupervised. The processing of personal data of children under the age of 16 requires guardian consent. In such cases, we will make reasonable efforts, using currently available technology, to verify that the guardian has obtained consent or authorization.

Fake Emails:

We will never ask you to confirm any account or credit card information via email. If you receive an email claiming to be from Itopmed, please ignore it and do not respond.

Changes to the Privacy Policy:

Our business is constantly changing, and so is our Privacy Policy. You should visit our website frequently to stay informed of any changes. Any changes to the Privacy Policy will be posted on the website, and the date at the bottom of this policy will be updated to reflect the last revision.

Contact Information:

If you have any questions or concerns about this Policy or any other privacy-related issues, or wish to exercise any of the rights listed above, please contact us at Itopmed.

Last updated - September 27, 2025